fix(db): renumber auth migrations to come after SP14/12-backups

The auth cherry-picks brought in 0010_auth_users_and_sessions.sql
(version: 10) and 0011_audit_log_user_id.sql (version: 11), which
collide with main's 0010_payer_rejected_acknowledged.sql (version: 10)
and 0011_processed_inbound_files.sql (version: 11). The migration
runner is filename-sorted but uses the -- version: N header to gate
'application vs skip', so the second file at each version gets
silently skipped — claims.payer_rejected_acknowledged_at never
got ALTERed, breaking every test that touches the claims table.

Renumber to 0013 and 0014 (and bump the -- version headers to
match) so they apply after 0012_backups.sql and main's existing
SP14 / SP15 migrations.

backend/src/cyclone/migrations/0013_auth_users_and_sessions.sql

@@ -1,4 +1,4 @@
--- version: 10
+-- version: 13
 -- Auth (SP-auth): users + sessions tables.
 --
 -- `users` holds the local credential store: bcrypt-hashed password,

backend/src/cyclone/migrations/0014_audit_log_user_id.sql

@@ -1,4 +1,4 @@
--- version: 11
+-- version: 14
 -- Auth (SP-auth): record the acting user_id on every audit_log entry.
 --
 -- Backwards-compatible: existing rows get NULL user_id (they were